Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
File: hg2fAamLUU69PCcj1_frRIMm9eI.mft (raw, json)
Hash identifier: ThBKCrdiz4lsWyjEIoOtOkW6fDAZdzLfi5Dyil9cwac=
Subject key identifier: A6:51:0A:72:7C:BB:6B:AD:78:45:FE:6D:52:16:B7:E9:5C:EF:2E:8C
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Certificate issuer: /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial: 019D2C987318715D43EF5125B2A64A6637DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
Manifest number: 1890
Signing time: Fri 27 Mar 2026 00:01:21 +0000
Manifest this update: Fri 27 Mar 2026 00:01:21 +0000
Manifest next update: Sat 28 Mar 2026 00:01:21 +0000
Files and hashes: 1: 7mhV_rdVlcfkhURFQ4wNrLsuU1c.roa (hash: VRlZTooxFrT0D1E6AOYVVz4EsX/5w5g/g1JyVqO9SPM=)
2: h_hShADtBIzeK-Szx9l4bfm8jag.roa (hash: hsH1pDZZoflDWpuxdoPCV7EaJcM0R+/7hC4hgh317+4=)
3: hg2fAamLUU69PCcj1_frRIMm9eI.crl (hash: hlz746GyFeEMAh8yfJETaJXdiwq+2iB50/WAjkbNS3A=)
4: rPAahRiAFhKEWjnyhz4z-0lkvXU.roa (hash: zzqyB+t4YAf4zoHDwM87ojkF2fRZqc5eAp62HCRrYX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:98:73:18:71:5d:43:ef:51:25:b2:a6:4a:66:37:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Validity
Not Before: Mar 27 00:01:21 2026 GMT
Not After : Mar 28 00:01:21 2026 GMT
Subject: CN=a6510a727cbb6bad7845fe6d5216b7e95cef2e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:12:9b:16:0f:d0:80:13:bc:40:bd:ad:fb:
25:8e:18:0d:47:5a:b8:7f:b8:a9:6a:97:93:34:45:
19:d9:f6:37:bf:d4:59:c3:ae:f5:4d:c8:5c:48:81:
b3:51:f8:09:37:9f:f5:3f:0a:65:68:40:99:25:90:
d7:11:cb:d9:18:42:25:3b:cc:55:95:6e:73:04:80:
d0:11:6f:c3:3e:ba:17:e8:47:ab:bc:e3:66:ee:cc:
00:cd:1e:ae:74:50:3a:0f:04:95:bd:dc:2f:f8:d1:
27:6a:91:a9:d3:42:ad:93:7b:42:4c:9c:05:46:25:
da:4f:87:52:04:f8:ac:a4:7d:58:09:d8:ac:3c:5c:
1f:39:7c:dc:d3:83:0e:ba:ba:a9:f3:49:3e:b9:d5:
58:fe:a6:4a:61:67:cd:b8:95:1b:c7:e7:57:2b:d2:
61:a5:17:1b:28:c5:a7:e9:98:c0:47:eb:fd:a3:b7:
51:a1:35:14:8c:20:ff:fc:7f:03:e9:35:7e:78:14:
92:a9:6a:93:05:03:06:fa:30:f3:49:54:98:05:7d:
d5:ae:a2:70:7d:70:5a:3d:1a:91:e7:bb:fc:dd:57:
c0:e5:90:05:bf:48:75:c1:57:6e:20:7b:6c:ce:ec:
2a:52:6a:8d:61:f0:2e:29:92:52:d0:18:58:67:bc:
4b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:51:0A:72:7C:BB:6B:AD:78:45:FE:6D:52:16:B7:E9:5C:EF:2E:8C
X509v3 Authority Key Identifier:
keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:94:ad:ce:a8:ab:86:92:d9:10:58:98:05:04:14:2a:0b:99:
ae:f8:82:6c:5e:f5:54:b3:b9:87:cd:eb:f1:66:a3:3a:e4:32:
43:a1:4b:2e:a1:c8:d5:3d:ae:05:56:21:60:44:d2:0d:9a:5d:
35:a1:d5:a3:01:30:e0:95:a2:65:c0:08:5f:5a:35:2b:db:d0:
d4:6f:9a:22:b1:a6:6e:e4:10:bc:bb:39:98:89:61:6f:d1:b7:
99:75:d1:2e:94:7a:49:4d:5f:86:6b:16:15:56:ec:25:02:55:
dc:c4:d6:01:4d:56:85:f3:d4:e5:b7:4f:b7:e5:9e:d6:c2:dd:
63:52:46:76:4c:26:32:7d:7d:39:c5:0d:c3:7c:d6:18:ca:03:
7d:5d:b3:98:52:f3:b0:ee:4e:09:c7:97:1d:0e:69:23:55:c7:
74:3e:54:25:76:fd:30:75:08:a5:30:ab:17:22:c8:2a:66:48:
3e:d1:4b:47:37:c4:b0:6c:cf:dd:8c:4a:6a:a9:8a:68:25:1d:
95:ed:d8:02:bd:b7:f2:3a:41:c0:52:6e:10:47:24:83:f7:6e:
ed:1e:5a:27:e9:79:13:fc:41:41:ab:0d:f8:db:0b:a6:94:04:
c1:1c:0e:e3:99:09:57:89:3b:7a:3c:04:2e:6f:59:eb:12:ba:
ed:f7:dc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:28:59 2026 by rpki-client